Free Public Security Utilities
Cloud Posture & OAuth Inspection Tools
Free, no-signup utilities built by Pistos Trust Labs to inspect public cloud tenant federation, decode OAuth permission scopes, and explore CIS / SOC 2 / ISO / NIST hardening baselines.
Microsoft 365 Tenant & Federation Inspector
Inspect any domain’s Entra ID tenant ID, OpenID federation mode, Exchange Online protection footprint, and recommended CIS Microsoft 365 v3.1 posture checks.
Open free tool →
Google Workspace & M365 Public Posture Checker
Detect whether a domain runs Google Workspace, Microsoft 365, or a hybrid split-delivery setup, and inspect public mail/identity authentication records.
Open free tool →
OAuth Scope Risk Explainer
Paste Microsoft Graph or Google Workspace OAuth scopes (e.g. Mail.ReadWrite, Directory.ReadWrite.All, https://mail.google.com/) to get a 0–100 blast-radius score and least-privilege alternatives.
Open free tool →
CIS M365 & Google Workspace Baseline Explorer
Browse all Pistos Pharos posture checks mapped to CIS Benchmarks, SOC 2 CC6/CC7, ISO 27001:2022, NIST CSF 2.0, and NIST SP 800-171 with step-by-step admin runbooks.
Open free tool →